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A. Background 


A.1 Background 


Goal #1 of the Information Commissioner’s Office (ICO) Information Rights Strategic Plan 2017-21 is 
‘to increase the public’s trust and confidence in how data is used and made available’. It is therefore 
important for the ICO to gauge and monitor the public’s changing perceptions in this area against 
benchmarks from previous waves of the research. 


The Trust and Confidence research was last undertaken in July 2018, and it is now over one year since 
the GDPR came into effect (May 2018). 


B. Aims & Objectives 


B.1 Overall Objective 
The main aim of this research is: 


“To gauge public perceptions and awareness of how data is shared with and used within 
organisations and to monitor any change in the trust and confidence in how data is used and made 
available.” 


Other objectives of this research are to: 


1) Understand public awareness and perceptions of the General Data Protection Regulation 
and how it affects their personal data. 

2) Explore the public's perceptions around technology in relation to the personal data that 
companies hold on individuals. 

3) Investigate individuals' knowledge around the Freedom of Information Act. 

4) Obtain a benchmark as to how the regulator for data protection in the UK is perceived by 
the public. 
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C. Executive Summary 


Below is a summary of the key findings from this year’s research. 


e The perceived importance of data protection continues to increase. 

o Significantly more people strongly agree it is important that their personal 
information is protected when they share it with companies/organisations. 
Significantly more people are concerned about their online activity being tracked. 
There has been a significant rise in the proportion of people stating that if an 
organisation was sharing their personal information without permission this would 
have a negative impact on their trust and confidence. 


e After the noise around the introduction of GDPR last year, there has been some stagnation. 

o Awareness of the GDPR is down slightly. 

o Whilst the proportion of people who trust companies/organisations with their 
personal data is up slightly, trust and confidence in companies/organisations storing 
and using personal data is down slightly. 

o Levels of understanding of how data is made available by companies/organisations to 
third parties and the public are down slightly. 


e There has been notable progress in some areas. 
o Significantly more people feel they have the right to be informed about the collection 
and use of their personal details. 
Trust and confidence in the police and financial services has increased significantly. 
Awareness of Freedom of Information rights has increased significantly. 


e More progress is required on key messages about the regulator. 

o Two fifths agree that the regulator is acting in the interests of the public. 

o More people disagree than agree that they have trust and confidence in the ability of 
the regulator to successfully enforce data protection and that the regulator enables 
those processing personal information to be creative, rather than putting barriers in 
the way. 

o Themost commonly cited data protection concern when prompted is cyber security, 
followed by children's privacy, sharing of data for marketing purposes and tracking of 
web browsing for marketing purposes. 
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D. Methodology and Response Rates 


D.1 Quotas and weighting 


Harris Interactive, an independent market research agency, interviewed 2259 adults online aged 18+ 


between 3" - 17" June 2019. 


Table 1. Number of interviews achieved by gender 


Total % 
. Male | 898 40% | 
| Female 1361 6096 
| TOTAL | 2259 | 100% 


Table 2. Number of interviews achieved by age 


Total % 

18-24 156 7% 
| 25-34 361 | 16% 

35-44 335 15% 

45-54 417 18% 

55-64 418 | 18% 

65+ 572 | = 25% | 
| TOTAL 2259 10096 | 


Table 3. Number of interviews achieved by region 


Total % 


England 1736 | 76% 
Scotland 218 | 10% 
Northern Ireland 159 | 7% 
Wales 146 | 796 

|. TOTAL 2259 | 10096 


D.2 Reporting 


The data has been weighted to be nationally representative by age, gender and region. 


Where relevant, comparisons have been made to the 2018 survey. 
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E. Research Findings 


E.1 Trust & Confidence 


The public continues to be split on the trust and confidence it has in companies and organisations 
storing and using their personal information. However, the percentage of people with high levels of 
trust and confidence has slightly decreased since 2018. 


e Nearly one in three (32%) people have high trust and confidence (rating 4-5 out of 5) in 
companies and organisations storing and using their personal information, which is slightly 
down from the 34% stating this in 2018. 

e The proportion stating ‘none at all’ has marginally increased from 9% to 1096. 


Q1. How much trust and confidence do you have in companies and organisations storing and using 
your personal information? 


2018 2019 


NET: Low trust and confidence 36% 38% 
1 - None at all 996 1096 
2 2896 2896 
3 3096 3096 
4 28% 27% 
5 — A great deal 6% 6% 
NET: High Trust and Confidence 34% 32% 


Base: All Adults: 2018 (2131) / 2019 (2259) 


e Males (36%) are significantly more likely to have high trust and confidence in companies and 
organisations storing and using their personal information than females (28%). 

e Trust and confidence in companies and organisations storing and using personal information 
is significantly higher amongst 18-34 year olds (45%) than 35-54 (30%) and 55+ year olds 
(24%). 
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The main stated reasons given by the public who have a high level of trust and confidence (rating 4-5 
out of 5) in companies and organisations storing and using your personal information are centred 
primarily around trust (borne out of experience or reputation) followed by awareness of legislation. 


Q1a. What is the main reason for the level of trust and confidence you have in companies and 
organisations storing and using your personal information? 
(Most cited reasons amongst those with a high level of trust and confidence) 


Good (previous) experience (Never had any problems/No experience of data 


breaches/loss etc.) 15% 
Legislation (protected by the law, law regulations, Data Protection Act etc.) 13% 
| trust the companies/their policies 1196 
You have to trust them (if you use them) 596 
Companies protect my data (they don't share/sell my information without my consent 

etc.) 596 
New GDPR policy/Companies have to comply with the new GDPR policy 596 
(I choose/use) Reputable/Well-known companies 496 
Their reputation is at stake (They care for their reputation, It's in their own interests to 

protect data, not lose customers etc.) 496 
Other 1196 
Don't know/Not sure 596 
NB: This question was not asked in 2018 Base: All Adults with a high level of trust and confidence in companies and 


organisations storing and using personal information: (728) 
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The main stated reasons given by the public who have a low level of trust and confidence (rating 1-2 
out of 5) in companies and organisations storing and using your personal information are centred 
around having previously experienced data loss/theft and the belief that companies share/sell 
personal information. 


Q1a. What is the main reason for the level of trust and confidence you have in companies and 
organisations storing and using your personal information? 


(Most cited reasons amongst those with a low level of trust and confidence) 


Due to experiencing data loss/theft (NET) 31% 
They share/sell personal information (NET) 27% 
Concerns about security (Lack of safety/ Security issues/ Poor security systems/It's 

not (completely) secure) 11% 
Concerns about data/information being misused (not sure what they do with my 

data) 11% 
Due to receiving calls/email spam for marketing & advertising 10% 
They are profit-driven (they use data for their own purposes/interests) 9% 
Other 5% 
Don’t know/Not sure 1% 
NB: This question was not asked in 2018 Base: All Adults with a low level of trust and confidence in companies and 


organisations storing and using personal information: (853) 
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People continue to be significantly more likely to have high trust and confidence (rating 4-5 out of 5) 
in the NHS, police and national governmental bodies than in private companies. 


e Two in three (66%) people say they have high trust and confidence in the NHS/their local GP 
storing and using their personal information, up 1% point from 2018. 

e Only one in seven (15%) people state they have high trust and confidence in social messaging 
platforms storing and using their personal information. This is unchanged from 2018. 

e The biggest gains are for financial services providers, the police and local Government, all 
seeing 6% increases between 2018 to 2019. 


Q2. How much trust and confidence do you have in the following companies and organisations 
storing and using your personal information? 


2018 2019 
NET LOW NET HIGH NET LOW NET HIGH 
TRUST & TRUST & TRUST & TRUST & 
CONFIDENCE CONFIDENCE CONFIDENCE CONFIDENCE 

The NHS or your local GP 12% 65% 11% 66% 
The Police 18% 54% 15% 60% 
National Governmental 20% 51% 18% 55% 
departments/ organisations 
Financial services 2296 4696 2196 5296 
Local Government 2496 4296 2296 4896 
Online retailers 2996 3396 3096 3496 
Mobile, broadband, utility 3396 2896 3496 2996 
providers 
Social messaging platforms 6096 1596 6396 1596 


Base: All Adults: 2018 (2131) / 2019 (2259) 


e 18-34 year olds are significantly more likely to have a higher level of trust and 
confidence in the police, National Government, financial services companies, 
online retailers, mobile, broadband and utility providers and social messaging 
providers than 35+ year olds. 

e Males (19%) are more likely to have high trust and confidence in social messaging 
providers than females (1096). Similarly, 18-34 year olds (2896) were significantly 
more likely to have high trust and confidence in social messaging providers than 
35-54 year olds (1596) and 55+ year olds (5%). 
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Levels of understanding of how personal data is used by companies/organisations remains at similar 
levels to 2018. One in six (16%) adults feel they have a good understanding of how their personal data 
is used by companies and organisations in the UK. This is slightly down from the 18% who felt they 
had a good understanding in 2018. 


e The proportion of people who feel they know very little or nothing at all about how their 
personal data is used by companies and organisations has increased slightly from 26% in 
2018 to 27% in 2019. 


Q3. Which of the following statements comes closest to your understanding of how your personal 
data is being used by companies and organisations in the UK? 


2018 2019 
| have a good understanding of how my personal 18% 16% 
data is used 
| am familiar with some aspects of how my personal 5596 5796 
data is used, but not all aspects 
| know very little about how my personal data is 2296 2496 
used 
| know nothing at all about how my personal data is 496 396 
used 


Base: All Adults: 2018 (2131) / 2019 (2259) 


e Males (19%) are significantly more likely to feel they have a good understanding 
of how their personal data is used than females (13%). 


e 554 year olds (31%) are more likely to feel that they know very little or nothing at 
all about how their personal data is used than 18-34 year olds (2496) and 35-54 
year olds (25%). 


e Members of the public from England (27%) and Wales (28%) are least likely to feel 
that they know very little or nothing at all about how their personal data is used 
compared to those from Scotland (30%) and Northern Ireland (30%). 
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The proportion of people with a good understanding of how their personal data is made available 
to third parties and the public by companies and organisations in the UK has remained fairly static 
since 2018. 


e Around one in six (15%) adults feel they have a good understanding of how their personal 
data is made available to third parties and the public by companies and organisations in 
the UK. This is a slight decrease from the 16% who felt they had a good understanding in 
2018. 


e Nearly two fifths (38%) feel they know very little or nothing at all about how their personal 
data is made available by companies and organisations. This is slightly up from the 35% 
feeling this in 2018. 


Q4. Which of the following statements comes closest to your understanding about how your personal 
data is being made available to third parties and the public by companies and organisations in the 
UK? 


2018 2019 


| have a good understanding of how my personal data 16% 15% 
is made available 


| am familiar with some aspects of how my personal 4996 4796 
data is made available, but not all aspects 

| know very little about how my personal data is made 2996 3296 
available 

| know nothing at all about how my personal data is 696 6% 


made available 


Base: All Adults: 2018 (2131) / 2019 (2259) 


e Males (18%) are significantly more likely to feel they have a good understanding 
of how their personal data is made available than females (11%), whereas females 
are significantly more likely to feel that they know very little or nothing at all about 
how their personal data is made available than males (42% vs 33% respectively). 


e Respondents from England (15%) are significantly more likely to feel they have a 
good understanding of how their personal data is made available than 
respondents from Northern Ireland (9%). 
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There has been a slight shift towards more people agreeing “it is easy to access and change my 
personal information held by businesses/organisations”, with 2% more agreeing and 3% more 
disagreeing since 2018. This highlights that, post GDPR, the public is slightly more aware that they 
have control over access and amendments to their data held by businesses and organisations, but the 
majority still are unsure as to how to do it. 


Q5. Do you agree or disagree with the following statements about the use of personal information in 
the UK? 


2018 2019 


NET | NET Don’t NET NET Dont 
Agree | Disagree | know | Agree | Disagree know 


It is easy to access and change my 2996 5996 12% 31% 56% 13% 
personal information held by 
businesses/organisations 


Current laws and regulations provide 33% 57% 10% 33% 58% 9% 
sufficient protection of personal 

information 

Businesses/ organisations are open and 26% 66% 8% 26% 65% 9% 


transparent about how they collect and 
use personal information 


It is easy to find out how my personal 23% 64% 13% 23% 64% 13% 
information is stored and used by 
businesses/ organisations 


It is easy to find out whether my personal! 23% 6396 14% 23% 63% 14% 
information is being made available to 
third parties 


Base: All Adults: 2018 (2131) / 2019 (2259) 


12 


©2019, Harris Interactive All rights reserved 


Information Commissioner’s Office 
Information Rights Strategic Plan: Trust and Confidence 


If an organisation that held personal data was either affected by a data breach or was sharing data 
with third parties, the public largely continues to feel that this would have a negative impact on their 
trust and confidence in the organisation. 


e The biggest change since 2018 is on “sharing my personal information to third parties without 
my permission”. The public is significantly more likely than in 2018 to feel if this happened it 
would cause a negative impact on the trust and confidence they have with the organisation 
(81% in 2019 compared with 77% in 2018). 


Q6. If an organisation that held your data was affected by any of the following, what impact would 
this have on your trust and confidence in this organisation? 


2018 2019 


Net | No | Ne Net | No Net 
Positive impact Negative Positive. impact Negative 
The organisation was sharing my 23% 36% 41% 24% 37% 39% 
personal information to third parties 
with my permission 


The organisation was affected by adata| 18% 18% 64% 18% 17% 65% 


breach (unauthorised access to or loss 
of my personal data) and told me 


The organisation was affected by a data | 12% 1196 7796 1096 1096 8096 
breach (unauthorised access to or loss 
of my personal data) and didn't tell me 


The organisation was sharing my 12% 11% 77% 10% 9% 81% 
personal information to third parties 
without my permission 


Base: All Adults: 2018 (2131) / 2019 (2259) 
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Around one half (49%) of the public stated that they or a close friend/family member have heard about 
or actually experienced a data breach (i.e. personal information being shared without permission, 
used fraudulently or lost/stolen) in the last 12 months. 


e Over one in five (22%) of the public state that they have personally heard of a news story 
about a data breach in a company/ organisation they have shared personal information with 
and were not personally notified in the last 12 months, and 16% have had this happen to a 
close friend/family member. 


Q7. Thinking about personal data you may hold with companies and organisations, have any of the 
following things happened to you or a close friend/family member in the last 12 months? 


2019 
| Happened to | Happened to a | Net you/ friend or 
you _ friend/ family family 
Net: ANY 42% 30% | 49% 
Heard a news story about a data breach ina 22% 16% 28% 


company/ organisation that I/they have 
Shared personal information with, but was 
not personally notified 


Personal data has been shared with a third 15% 14% 21% 
party without permission 


Had an online account(s) accessed or used 12% 15% 20% 
fraudulently by someone else 


Had personal details stolen and used to 8% 12% 16% 
commit fraud 


Been told by a company I/they hold an 11% 9% 15% 
laccount with or are employed by, that 
my/their personal details may have been lost 


lor stolen 
None of these 58% 61% 51% 
NB: This question was not asked in a comparable manner in 2018 Base: All Adults: 2019 (2259) 
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Over four in five (83%) feel that if a company/organisation that they used was affected by a data 
breach and their information was lost or stolen, the company holding the data should be held 
responsible. This is a significant increase from the 78% stating this in 2018. 


Q8. If a company/organisation that you used was affected by a data breach and your information 
was lost or stolen, who do you think should be held responsible? 


2018 2019 
The company/ organisation who was holding your data 7896 8396 
A regulatory body 15% 16% 
The Government 11% 11% 
Yourself 11% 10% 
Don’t Know 6% 6% 
None 4% 3% 
Other 1% 1% 

Base: All Adults: 2018 (2131) / 2019 (2259) 


55+ year olds (91%) are significantly more likely to state that the company/organisation 
holding their data should be held responsible than 35-54 year olds (81%) and 18-34 year olds 
(73%). 


o 18-34 year olds (22%) were notably more likely to state that if they were affected by 


a data breach, a regulatory body should be held responsible than 35-54 year olds 
(15%) and 55+ year olds (12%). 
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As seen in 2018, people are most likely to state that banning companies/ organisations from sharing 
personal information with third parties without permission would increase their trust and confidence 
in how their personal data is used and made available. This is ranked first of six options by 29% and in 
the top three by 71%, up significantly on 65% in 2018. 


Q9. Which of the following, if any, would increase your trust and confidence in how your personal 
data is used and made available by companies and organisations? 


2018 2019 


is) Ne CIE NERI 
Choice Top3 Choice Top3 


Banning companies/ organisations from sharing personal 2696 6596 2996 7196 
information with third parties without permission 


Making it a legal requirement for companies/ organisations to | 2396 6596 2396 6796 
itell customers that they have been affected by a data breach 


Fining companies and organisations if they are found to use 1596 5896 1596 6196 
personal information without permission 


Custodial sentences (i.e. prison) for those responsible for the 1596 4796 1796 4796 
most severe breaches in the use of personal information 


Making it easier to see and change any consent | have given 1496 4496 1296 4296 
regarding the use of my personal information 
None of the above 796 796 496 496 


Base: All Adults: 2018 (2131) / 2019 (2259) 


There has been a slight increase in the extent to which the public trusts businesses with their personal 
information (28%, compared to 26% in 2018). However, there continues to be greater levels of 
distrust. 


Q10. To what extent do you trust companies & organisations with your personal information? 


2018 2019 
NET: Trust 26% 28% 
Trust completely 3% 4% 
Trust a little 2296 2396 
Neither trust nor distrust 3096 2896 
Distrust a little 3696 3496 
Distrust completely 996 1096 
NET: Distrust 4596 45% 


Base: All Adults: 2018 (2131) / 2019 (2259) 


e 18-34 year olds (37%) are significantly more likely to state that they trust businesses with their 
personal information than 35-54 year olds (23%) and 55+ year olds (25%). 
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E.2 GDPR 


Four fifths (80%) of the public in 2019 agree that it is important that their personal information is 
protected when they share it with companies and organisations. This is a significant increase from 


2018 (75%). 
e The proportion stating they strongly agree is up significantly from 52% to 61% in 2019. 


Q11. How much do you agree or disagree that “it is important that my personal information is 
protected when I share it with companies and organisations"? 


2018 2019 
NET: Agree 75% 80% 
Strongly agree 52% 61% 
Tend to agree 23% 19% 
Neither agree nor disagree 10% 9% 
Tend to disagree 12% 8% 
Strongly disagree 4% 4% 
NET: Disagree 16% 11% 

Base: All Adults: 2018 (2131) / 2019 (2559) 


18-34 year olds (74%) are less likely to agree that it is important that their personal 


e 
information is protected when they share it with businesses than 35-54 year olds (7796) and 


554 year olds (87%). 
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Post GDPR, there has been a slight increase in awareness of the rights people have with regards to 
personal details held about them by companies and organisations. 


e = The right that most are aware of is the right to access your personal data (59% vs 58% in 2018). 


e There are significant increases in the proportion of people aware of the right to be informed 
about the collection and use of your personal data (57% vs 52% in 2018) and the right to have 
inaccurate personal data rectified, or completed if it is incomplete (49% vs 45%). 


e The least known rights are the right to move data from one provider to another (30% vs 27% 


in 2018) and the right not to be subject of automated decision making and profiling (31% vs 


30%). 


Q12. What rights under law do you think you have with regards to personal details held about you 


by companies and organisations in the UK? 


2018 2019 
The right to access your personal data 58% 59% 
The right to be informed about the collection and use 
of your personal data 5296 5796 
The right to have inaccurate personal data rectified, 
or completed if it is incomplete 4596 4996 
|The right to object to personal data being processed 4396 4596 
The right to be forgotten / to have personal data 
erased 4496 4396 
The right to restrict the processing of their personal 
data 3996 4196 
The right not to be subject of automated decision 
making and profiling 3096 3196 
The right to move data from one provider to another 2796 3096 
None of the above - individuals have no rights under 3% 3% 
law 
Don’t Know 13% 15% 


e Awareness of the rights generally increases with age, with 55+ year olds being most aware. 
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Unprompted, the largest proportion of the public states that if they wanted to get advice and/or 
information on protecting their personal data, they would search online, mentioned by more than a 
quarter (28%). A further one in eight (13%) of the public would contact the company in question and 
just over one in ten (11%) would seek advice from the Citizens Advice Bureau (11%). 


However, knowing where to source advice and/or information on protecting personal data is not top 
of mind, with over one in five (22%) of the public stating they are unsure. 


Q13a. What would you do if you wanted to get advice and/or information on protecting your 
personal data? (UNPROMPTED) 
(Most cited reasons) 


| 2019 
Search online (NET) 28% 
Contact the company in question (NET) 13% 
Contact Citizens Advice Bureau/CAB (for advice) 11% 
Look on/seek help on government websites (gov.uk) 5% 
Contact a solicitor/lawyer/Seek legal advice 3% 
Ask/search for information/seek advice (generic) 2% 
Contact the government/government bodies 2% 
Contact the Information Commissioner's Office (ICO) (website) 2% 
Other 7% 
Don't know/Not sure 22% 
NB: This question was not asked in 2018 Base: All Adults: 2019 (2259) 
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When prompted, the most common way that the public would look to get advice and/or 
information on protecting their personal data is via a search engine, mentioned by over half (53%). 
This is significantly up on the proportion stating this in 2018 (35%), but it must be noted that the 
new, preceding open question is very likely to have impacted this result. 


There has been a significant increase in the proportion of people in 2019 who would seek 
advice and/or information on protecting personal data from the Citizens Advice Bureau (46% 
vs 41% in 2018) 


The proportion stating they would get advice and/or information from the ICO in 2019 (31%) 
has decreased slightly from 33% from 2018. 


The proportion who would seek advice from friends and family has significantly increased 
since 2018, with nearly a quarter (23%) stating that they would use this channel (up from 16% 
in 2018). 


The proportion of those who are unsure as to where they would get advice and/or information 
has decreased significantly since 2018, with less than one in ten (9%) unsure, compared with 
16% in 2018. 


Q13. Where would you go to get advice and/or information on protecting your personal data? 
(PROMPTED) 


A search engine II O 539, 
Citizens Advice Gurean, ic 


: ER 1 : 9 
Information Commissioner's Office y 


Friends & family M Sn 30, 
Wikipedia BE, 9%, 
0, 
Yourloca MP BENI dd 
| wouldn't look for advice 3” 
Other Li% 


Don't know I 16% 


m2018 m2019 


Base: All Adults: 2018 (2131) / 2019 (2259) 
Females (1196) are significantly more likely to be unsure as to where to get advice and/or 


information on protecting their personal data than males (796). 

554 year olds (3896) are significantly more likely to look to get advice and/or information on 
protecting their personal data from the Information Commissioner's Office than 18-34 year 
olds (23%) and 35-54 year olds (30%). 
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There has been a slight decrease in the proportion who have heard of the GDPR (82% vs 84% in 2018). 
The proportion who feel they know about the GDPR (rather than only having heard of it) has fallen 
significantly from 55% to 50% in 2018. 


e Females (20%) are significantly more likely to state that they haven’t heard about the GDPR 
than males (16%). 


Q14. Have you ever heard of the General Data Protection Regulation (GDPR)? 


16% 18% 


2018 2019 


W No, | haven't heard of it m Yes, but | don't know anything about it m Yes, | know about it 


Base: All Adults: 2018 (2131), 2019 (2259) 


e Respondents from Scotland (25%) are more likely to have not heard about GDPR than 
members of the public from England (17%), Northern Ireland (1796) and Wales (19%). 
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Two fifths (42%) of the public agree that the regulator of data protection is acting in their interests. 


e However, whilst three in ten (30%) have trust and confidence in the ability of the regulator to 
successfully enforce data protection, a larger proportion disagrees (35%). 

e Also, whilst a quarter (25%) believes the regulator enables those processing personal 
information to be creative, rather than putting barriers in the way, a larger proportion 
disagrees (32%). 


Q13b. How much do you agree or disagree with the following statements about the regulator of 
data protection in the UK? 


26% 


| believe the regulator is acting in | have trust and confidence in the I believe the regulator enables 
the interests of the public regulator's ability to successfully those processing personal 
enforce data protection information to be creative, rather 
than putting barriers in the way 


E Net Disagree Neither E Net Agree 


NB: This question was not asked in 2018 Base: All Adults: 2019 (2259) 


e 18-34 year olds (38%) are significantly more likely to agree that they have trust and confidence 
in the regulator's ability to successfully enforce data protection compared with 35-54 and 55+ 
year olds (both at 2796 respectively). 
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The data protection concern that people are most concerned about is cyber security (ranked as most 
important by 23% and as a top 3 priority by 49%). 


Other commonly cited data protection concerns include; 


Children’s privacy (ranked as most concerning - 15%) 

Sharing of data between companies for marketing purposes (ranked as most concerning - 
14%) 

Tracking of web browsing across devices for marketing purposes (ranked as most concerning 
- 10%). 


Q14a. Please rank the following data protection concerns in order of their importance to you 


personally. 

2019 
Cyber security 23% (| 4996 [ 
Children's privacy 15% 37% 
Sharing of data between companies for marketing purposes 14% 41% 
Tracking of web browsing across devices for marketing purposes 10% 34% 
Use of surveillance and facial recognition technology 9% 28% 
Data security across international borders 9% 33% 
Use of personal information in political campaigns 8% 27% 
Artificial intelligence and automated decision making 6% 23% 
Compliance to Freedom of Information requests 6% 23% 
Other 1% 5% 
NB: This question was not asked in 2018 Base: All Adults: 2019 (2259) 


Females (19%) are significantly more likely to rank children’s privacy as of most importance to 
them, compared with males (12%). 

55+ year olds (16%) and 35-54 year olds (15%) are significantly more likely to rank sharing of 
data between companies for marketing purposes as being of most importance to them, 
compared with 18-34 year olds (10%). 
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E.3 Technology 


e Over one in three (36%) of the public agree that companies and organisations protect their 
personal information from the risks arising from technology, which is a slight decrease on the 
39% stating this in 2018. 

e Just over one third (34%) of the public disagree, which is a slight increase on the 32% stating 
this in 2018. 


Q15. To what extent do you agree or disagree that companies and organisations protect your 
personal information from the risks arising from technology? 


2018 2019 


m NET Disagree mNeither mNET Agree 


Base: All Adults: 2018 (2131) / 2019 (2259) 


e 18-34 year olds (44%) are significantly more likely to agree that companies and organisations 
protect their personal information from the risks arising from technology, compared to 35-54 
year olds (35%) and 55+ year olds (30%). 
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Personal information being stolen by criminals remains a concern for three quarters (76%) of the 
public when companies and organisations use their personal information, which is slightly up on the 
2018 figure of 74%. 


e Over half are concerned about ‘personal information being used in an automated way to make 
decisions about me’ (54%) and online activity being tracked (56%), which are both slight 
increases on the 2018 proportions of 51% and 53% respectively. 


e Just 6% are not concerned about any of these outcomes. 


Q16. Which of the following outcomes are you most concerned about when companies and 
organisations use your personal information? 


2018 2019 
Personal information being stolen by criminals 74% 76% 
My online activity being tracked 

53% 56% 
Personal information being used in an 
automated way to make decisions about me 51% 54% 
None of these 

7% 6% 


Base: All Adults: 2018 (2131) / 2019 (2259) 


e 55+ year olds are significantly more worried about their personal information being stolen by 
criminals (85%) than 18-34 year olds (63%) and 35-54 year olds (78%). 


e Females (80%) are more worried about their personal information being stolen by criminals 
than males (72%). 
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E.4 Freedom of Information (FOI) 


There has been an increase in the awareness of rights that the public feels it has to access information 
held by the government, public authorities and/or publicly owned companies. 


e The biggest shifts in awareness are seen on the right to know what type of information is 
available from public organisations (2018 4396 and 2019 5096) and the right to see what public 
money is being spent on (2018 4096 and 2019 47%). 


Q17. What rights under law do you think you have to access information held by the government, 
ublic authorities and/or publicly owned companies and organisations in the UK? 


The right to request information held by public 4996 
organisations 


54% 


The right to know what type of information is 43% 
available from public organsiations 


50% 


The right to see what public money is being spent on 40% 


47% 


The right to see official information from public 36% 
organsiations such as minutes and planning... 


42% 


The right to request information about the 33% 
environment 


39% 


24% 
23% 


Don't know 
The public don't have any rights He 


0% 10% 20% 30% 40% 50% 60% 


m2018 m2019 


Base: All Adults: 2018 (2131) / 2019 (2259) 


e 55+ year olds (58%) are significantly more likely to be aware of the right to request information 
held by public organisations than 18-34 year olds (47%). 


e Respondents from Scotland (65%) are significantly more likely to be aware of the right to 
request information held by public organisations than respondents from England (53%) and 
Wales (49%). 
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e The level of agreement (40%) that information the public wants about the Government, public 
authorities and or publicly owned companies is available and accessible has remained similar 
to 2018 (39%). 


e Nearly three fifths (58%) of respondents agree that the more information they can access 
about Government, public authorities and/or publicly owned companies the more trust and 
confidence they are likely to have in their work. 


Q18. Do you agree or disagree with the following statements? 
2018 2019 


Net Neither Net Net Neither Net 
Agree Disagree Agree | Disagree 


Information | want about Government, 
public authorities and/or publicly 39% 31% 30% 40% 36% 24% 
owned companies is available and 
accessible 


The more information I can access about 
Government, public authorities and/or 
publicly owned companies the more N/A N/A N/A 5896 2796 1596 
trust and confidence I am likely to have 
in their work 

N/A : This question was not asked in 2018 Base: All Adults: 2018 (2131) / 2019 (2259) 
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